@antelopejs/dms-frontend 0.5.5 → 0.6.0

package/dist/commands/dev-action.js

@@ -10,6 +10,8 @@ const output_1 = require("../output");
 const ports_1 = require("../ports");
 const server_process_1 = require("../server-process");
 const update_check_1 = require("../update-check");
+const manifest_1 = require("../manifest");
+const module_set_1 = require("../module-set");
 const workspace_task_1 = require("./workspace-task");
 function clientHost() {
     const host = process.env.HOST?.trim();
@@ -70,51 +72,118 @@ async function runDev(options) {
             });
         }
     }
-    const secrets = (0, common_1.resolveManifestSecrets)(manifestSecrets);
-    (0, common_1.reportManifestSecrets)(secrets, (count) => `Set ${count === 1 ? "it" : "them"} in the environment or the project's .env`);
-    const stopWatchers = (0, common_1.startLayerWatchers)(workspaceDir, layers);
+    const session = {
+        backendUrl,
+        clientUrl,
+        port,
+        workspaceKey,
+        bootstrapSecret,
+        refreshBootstrapSecret: () => (0, common_1.resolveBootstrapSecret)(options.bootstrapSecret, backendUrl),
+        sessionSecret,
+        startedAt,
+        isOffline: !!offline,
+    };
+    let setup = { workspaceDir, layers, manifestSecrets };
+    await reserved.release();
+    for (;;) {
+        const run = await serveWorkspace(session, setup);
+        if (!run.isRestart) {
+            process.exitCode = run.code;
+            return;
+        }
+        ui.message("info", "Frontend modules changed on the backend: rebuilding the workspace");
+        session.startedAt = Date.now();
+        session.bootstrapSecret = session.refreshBootstrapSecret();
+        setup = await (0, workspace_task_1.setUpWorkspace)({
+            backendUrl,
+            force: false,
+            mode: "dev",
+            offline: false,
+            clientUrl,
+            workspaceKey,
+            bootstrapSecret: session.bootstrapSecret,
+        });
+    }
+}
+function servedModules(setup) {
+    return (0, manifest_1.readCachedManifest)(setup.workspaceDir)?.manifest.modules ?? [];
+}
+function reportServed(session, setup) {
+    return (0, module_set_1.reportFrontendReady)(session.backendUrl, servedModules(setup).map((module) => module.name), session.bootstrapSecret);
+}
+async function serveWorkspace(session, setup) {
+    const restart = new AbortController();
+    const stopFollowing = session.isOffline
+        ? () => undefined
+        : (0, module_set_1.followModuleSet)({
+            backendUrl: session.backendUrl,
+            clientUrl: session.clientUrl,
+            bootstrapSecret: () => {
+                session.bootstrapSecret = session.refreshBootstrapSecret();
+                return session.bootstrapSecret;
+            },
+            fingerprint: (0, module_set_1.moduleSetFingerprint)(servedModules(setup)),
+            onChange: () => restart.abort(),
+            onUnchanged: () => void reportServed(session, setup),
+        });
+    const stopWatchers = (0, common_1.startLayerWatchers)(setup.workspaceDir, setup.layers);
     const handleShutdown = async () => {
+        stopFollowing();
         await stopWatchers();
     };
     process.once("SIGINT", handleShutdown);
     process.once("SIGTERM", handleShutdown);
-    const nodeModulesDir = (0, node_path_1.join)(workspaceDir, "node_modules");
-    await reserved.release();
+    try {
+        const code = await runDevServer(session, setup, restart.signal);
+        return { code, isRestart: restart.signal.aborted };
+    }
+    finally {
+        process.off("SIGINT", handleShutdown);
+        process.off("SIGTERM", handleShutdown);
+        stopFollowing();
+        await stopWatchers();
+    }
+}
+function runDevServer(session, setup, stopSignal) {
+    const secrets = (0, common_1.resolveManifestSecrets)(setup.manifestSecrets);
+    (0, common_1.reportManifestSecrets)(secrets, (count) => `Set ${count === 1 ? "it" : "them"} in the environment or the project's .env`);
     const secretSources = (0, common_1.describeSecretSources)(secrets.sources);
-    const code = await (0, server_process_1.runServer)({
+    const nodeModulesDir = (0, node_path_1.join)(setup.workspaceDir, "node_modules");
+    return (0, server_process_1.runServer)({
         name: "dev server",
         script: "server.mjs",
-        cwd: workspaceDir,
-        mapPath: (0, child_output_1.createPathMapper)(workspaceDir, layers),
+        cwd: setup.workspaceDir,
+        mapPath: (0, child_output_1.createPathMapper)(setup.workspaceDir, setup.layers),
+        stopSignal,
         env: {
             ...process.env,
-            PORT: String(port),
+            PORT: String(session.port),
             DMS_DEV: "true",
             DMS_COOKIE_SECURE: process.env.DMS_COOKIE_SECURE ?? "false",
-            DMS_API_BASE_URL: backendUrl,
-            DMS_BOOTSTRAP_SECRET: bootstrapSecret,
-            DMS_SESSION_SECRET: sessionSecret,
+            DMS_API_BASE_URL: session.backendUrl,
+            DMS_BOOTSTRAP_SECRET: session.bootstrapSecret,
+            DMS_SESSION_SECRET: session.sessionSecret,
             ...secrets.env,
             NODE_OPTIONS: "--max-old-space-size=4096",
             NODE_PATH: nodeModulesDir,
         },
         onReady: (address) => {
             (0, output_1.writeReadyBlock)({
-                title: `Dev server ready in ${(0, cli_1.formatDuration)(Date.now() - startedAt)}`,
+                title: `Dev server ready in ${(0, cli_1.formatDuration)(Date.now() - session.startedAt)}`,
                 lines: (0, server_process_1.readyLines)(address, [
-                    { label: "Backend", value: backendUrl },
-                    { label: "Workspace", value: (0, output_1.showWorkspace)(workspaceDir) },
+                    { label: "Backend", value: session.backendUrl },
+                    { label: "Workspace", value: (0, output_1.showWorkspace)(setup.workspaceDir) },
                     ...(secretSources
                         ? [{ label: "Secrets", value: secretSources }]
                         : []),
                 ]),
                 footer: [
-                    `Watching ${(0, cli_1.pluralize)(layers.length, "layer source")}`,
+                    `Watching ${(0, cli_1.pluralize)(setup.layers.length, "layer source")}`,
                     "Ctrl+C to stop",
-                ].join(ui.symbols.separator),
+                ].join((0, cli_1.getProcessUi)().symbols.separator),
             });
+            void reportServed(session, setup);
             void (0, update_check_1.reportAvailableUpdate)({ isFollowed: true });
         },
-    }).finally(stopWatchers);
-    process.exitCode = code;
+    });
 }

package/dist/commands/start-action.js

@@ -9,6 +9,7 @@ const output_1 = require("../output");
 const ports_1 = require("../ports");
 const server_process_1 = require("../server-process");
 const update_check_1 = require("../update-check");
+const module_set_1 = require("../module-set");
 const BUILD_TIME_MANIFEST = "the build-time manifest";
 async function runStart(options) {
     const startedAt = Date.now();
@@ -70,6 +71,7 @@ async function runStart(options) {
                 ]),
                 footer: "Ctrl+C to stop",
             });
+            void (0, module_set_1.reportFrontendReady)(backendUrl, ((0, common_1.readCachedManifest)(workspaceDir)?.manifest.modules ?? []).map((module) => module.name), process.env.DMS_BOOTSTRAP_SECRET);
             void (0, update_check_1.reportAvailableUpdate)({ isFollowed: true });
         },
     });

package/dist/common.d.ts

@@ -8,6 +8,7 @@ export * from "./manifest-secrets";
 export * from "./layer-watch";
 export * from "./materialize";
 export * from "./derived-outputs";
+export * from "./app-configs";
 export * from "./renderer-range";
 export * from "./workspace";
 export * from "./workspace-setup";

package/dist/common.js

@@ -24,6 +24,7 @@ __exportStar(require("./manifest-secrets"), exports);
 __exportStar(require("./layer-watch"), exports);
 __exportStar(require("./materialize"), exports);
 __exportStar(require("./derived-outputs"), exports);
+__exportStar(require("./app-configs"), exports);
 __exportStar(require("./renderer-range"), exports);
 __exportStar(require("./workspace"), exports);
 __exportStar(require("./workspace-setup"), exports);

package/dist/config.d.ts

@@ -10,6 +10,8 @@ export declare const TEMPLATE_FILES: ReadonlyArray<readonly [string, string]>;
 export declare const LAYERS_SUBDIR = "frontend-modules";
 export declare const FRONTEND_MODULE_ENTRY = "dms.frontend.ts";
 export declare const FRONTEND_BUILD_ENTRY = "dms.frontend.build.ts";
+export declare const SERVER_MODULE_ENTRY = "dms.server.ts";
+export declare const SERVER_OPTIONS_FILE = "generated-server-options.json";
 export declare const AUTH_ESTABLISH_FILE = "generated-auth-establish.json";
 export declare const PUBLIC_ENDPOINTS_FILE = "generated-public-endpoints.json";
 export declare const LAYER_COPY_BLOCKLIST: readonly string[];

package/dist/config.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Options = exports.UsageError = exports.TAILWIND_SOURCE_GLOB = exports.PNPM_LIFECYCLE_SCRIPTS = exports.layerCopyIgnore = exports.LAYER_COPY_BLOCKLIST = exports.PUBLIC_ENDPOINTS_FILE = exports.AUTH_ESTABLISH_FILE = exports.FRONTEND_BUILD_ENTRY = exports.FRONTEND_MODULE_ENTRY = exports.LAYERS_SUBDIR = exports.TEMPLATE_FILES = exports.WORKSPACE_DIR_MODE = exports.DEPS_HASH_FILE = exports.DMS_FRONTEND_HOME = void 0;
+exports.Options = exports.UsageError = exports.TAILWIND_SOURCE_GLOB = exports.PNPM_LIFECYCLE_SCRIPTS = exports.layerCopyIgnore = exports.LAYER_COPY_BLOCKLIST = exports.PUBLIC_ENDPOINTS_FILE = exports.AUTH_ESTABLISH_FILE = exports.SERVER_OPTIONS_FILE = exports.SERVER_MODULE_ENTRY = exports.FRONTEND_BUILD_ENTRY = exports.FRONTEND_MODULE_ENTRY = exports.LAYERS_SUBDIR = exports.TEMPLATE_FILES = exports.WORKSPACE_DIR_MODE = exports.DEPS_HASH_FILE = exports.DMS_FRONTEND_HOME = void 0;
 exports.writeSecretBearingFile = writeSecretBearingFile;
 exports.parseBackendUrl = parseBackendUrl;
 exports.requireBackendUrl = requireBackendUrl;
@@ -38,19 +38,24 @@ function writeSecretBearingFile(file, content) {
 exports.TEMPLATE_FILES = [
     ["vite.config.ts", "vite.config.ts"],
     ["vite.email.config.ts", "vite.email.config.ts"],
+    ["vite.server.config.ts", "vite.server.config.ts"],
     ["index.html", "index.html"],
     ["main.ts", "main.ts"],
     ["app-runtime.ts", "app-runtime.ts"],
     ["network-error.ts", "network-error.ts"],
     ["ui-app-config.ts", "ui-app-config.ts"],
+    ["layer-app-config.ts", "layer-app-config.ts"],
     ["ssr-renderer.ts", "ssr-renderer.ts"],
     ["frontend-module.ts", "frontend-module.ts"],
     ["frontend-build.ts", "frontend-build.ts"],
     ["frontend-build-loader.ts", "frontend-build-loader.ts"],
+    ["server-module.ts", "server-module.ts"],
     ["icon-hydration.ts", "icon-hydration.ts"],
     ["globals.d.ts", "globals.d.ts"],
     ["compress-assets.mjs", "compress-assets.mjs"],
     ["head-order.mjs", "head-order.mjs"],
+    ["client-server-guard.mjs", "client-server-guard.mjs"],
+    ["ui-inertia-page.mjs", "ui-inertia-page.mjs"],
     ["icon-api.mjs", "icon-api.mjs"],
     ["icon-scan.mjs", "icon-scan.mjs"],
     ["email-renderer.ts", "email-renderer.ts"],
@@ -59,6 +64,7 @@ exports.TEMPLATE_FILES = [
     ["email-markup.ts", "email-markup.ts"],
     ["tsconfig.json", "tsconfig.json"],
     ["typecheck-loader.mjs", "typecheck-loader.mjs"],
+    ["prepare-types.mjs", "prepare-types.mjs"],
     ["app-config-stub.mjs", "app-config-stub.mjs"],
     ["DmsDynamicPage.vue", "DmsDynamicPage.vue"],
     ["server.mjs", "server.mjs"],
@@ -71,6 +77,8 @@ exports.TEMPLATE_FILES = [
 exports.LAYERS_SUBDIR = "frontend-modules";
 exports.FRONTEND_MODULE_ENTRY = "dms.frontend.ts";
 exports.FRONTEND_BUILD_ENTRY = "dms.frontend.build.ts";
+exports.SERVER_MODULE_ENTRY = "dms.server.ts";
+exports.SERVER_OPTIONS_FILE = "generated-server-options.json";
 exports.AUTH_ESTABLISH_FILE = "generated-auth-establish.json";
 exports.PUBLIC_ENDPOINTS_FILE = "generated-public-endpoints.json";
 exports.LAYER_COPY_BLOCKLIST = [
@@ -80,8 +88,6 @@ exports.LAYER_COPY_BLOCKLIST = [
     "coverage",
     ".cache",
     ".turbo",
-    "server",
-    "**/server",
     "tsconfig.json",
     "tsconfig.*.json",
 ];

package/dist/derived-outputs.d.ts

@@ -7,6 +7,7 @@ export interface FrontendModuleRegistryEntry {
     priority: number;
     entry?: string;
     build?: string;
+    server?: string;
     options: FrontendModuleOptions;
 }
 export interface FrontendModuleRegistry {
@@ -24,6 +25,7 @@ export interface DerivedOutput {
     name: string;
     affects(relativePath: string): boolean;
     write(workspaceDir: string, registry: FrontendModuleRegistry): boolean;
+    readsSourcesAsData?: boolean;
     restartHint?: string;
 }
 export declare const DERIVED_OUTPUTS: readonly DerivedOutput[];

package/dist/derived-outputs.js

@@ -7,6 +7,8 @@ exports.writeLocaleMessages = writeLocaleMessages;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const config_1 = require("./config");
+const app_configs_1 = require("./app-configs");
+const asset_roots_1 = require("./asset-roots");
 const layer_aliases_1 = require("./layer-aliases");
 const layers_1 = require("./layers");
 const fs_sync_1 = require("./fs-sync");
@@ -23,6 +25,8 @@ function validateFrontendModuleRegistry(registry, workspaceDir) {
             throw new Error(`Invalid frontend module entry: ${module.id}`);
         if (module.build !== undefined && module.build !== config_1.FRONTEND_BUILD_ENTRY)
             throw new Error(`Invalid frontend module build entry: ${module.id}`);
+        if (module.server !== undefined && module.server !== config_1.SERVER_MODULE_ENTRY)
+            throw new Error(`Invalid frontend module server entry: ${module.id}`);
         if (!(0, node_path_1.resolve)(module.root).startsWith(moduleRoot))
             throw new Error(`Frontend module root escapes the workspace: ${module.id}`);
         ids.add(module.id);
@@ -32,6 +36,7 @@ function createFrontendModuleRegistry(workspaceDir, layers) {
     const modules = layers.map((layer) => {
         const sourceEntry = (0, node_path_1.join)(layer.path, config_1.FRONTEND_MODULE_ENTRY);
         const buildEntry = (0, node_path_1.join)(layer.path, config_1.FRONTEND_BUILD_ENTRY);
+        const serverEntry = (0, node_path_1.join)(layer.path, config_1.SERVER_MODULE_ENTRY);
         const options = layer.options ?? {};
         return {
             id: (0, layers_1.getLayerSafeName)(layer),
@@ -41,6 +46,7 @@ function createFrontendModuleRegistry(workspaceDir, layers) {
             priority: layer.priority ?? 0,
             entry: (0, node_fs_1.existsSync)(sourceEntry) ? config_1.FRONTEND_MODULE_ENTRY : undefined,
             build: (0, node_fs_1.existsSync)(buildEntry) ? config_1.FRONTEND_BUILD_ENTRY : undefined,
+            server: (0, node_fs_1.existsSync)(serverEntry) ? config_1.SERVER_MODULE_ENTRY : undefined,
             options: layer.configKey ? { [layer.configKey]: options } : options,
         };
     });
@@ -53,6 +59,7 @@ function writeFrontendTypePaths(workspaceDir, registry) {
     const paths = {
         "#dms/frontend-module": ["./frontend-module.ts"],
         "#dms/frontend-build": ["./frontend-build.ts"],
+        "#dms/server": ["./server-module.ts"],
         "@frontend/*": ["./frontend-modules/*"],
         ...(0, layer_aliases_1.frontendLayerTypePaths)([...registry.modules].reverse().map((module) => module.root), { relativeTo: workspaceDir }),
     };
@@ -81,27 +88,29 @@ function writeFrontendBuildLoader(workspaceDir, registry) {
     const content = `${imports}\n\nimport type { FrontendBuildDeclaration } from "./frontend-build-loader";\n\nexport const frontendBuilds: FrontendBuildDeclaration[] = [${declarations}];\n`;
     return (0, fs_sync_1.applyContent)(content, (0, node_path_1.join)(workspaceDir, "frontend-builds.generated.ts"));
 }
+function writeServerModuleLoader(workspaceDir, registry) {
+    const modules = registry.modules.filter((module) => module.server);
+    const imports = modules
+        .map((module, index) => `import server${index} from "./${config_1.LAYERS_SUBDIR}/${module.id}/${module.server}";`)
+        .join("\n");
+    const declarations = modules
+        .map((module, index) => `{ id: ${JSON.stringify(module.id)}, priority: ${module.priority}, setup: server${index} }`)
+        .join(", ");
+    const content = `${imports}\n\nimport type { DmsServerSetup } from "./server-module";\n\nexport const serverModules: { id: string; priority: number; setup: DmsServerSetup }[] = [${declarations}];\n`;
+    return (0, fs_sync_1.applyContent)(content, (0, node_path_1.join)(workspaceDir, "server-modules.generated.ts"));
+}
 function writeModuleRegistry(workspaceDir, registry) {
     const wroteRegistry = (0, fs_sync_1.applyContent)(`${JSON.stringify(registry, null, 2)}\n`, (0, node_path_1.join)(workspaceDir, "generated-frontend-modules.json"));
     const wroteModules = writeFrontendModuleLoader(workspaceDir, registry);
     const wroteBuilds = writeFrontendBuildLoader(workspaceDir, registry);
-    return wroteRegistry || wroteModules || wroteBuilds;
-}
-function moduleAssetRoots(moduleRoot) {
-    const layersRoot = (0, node_path_1.join)(moduleRoot, "layers");
-    if (!(0, node_fs_1.existsSync)(layersRoot)) {
-        return [{ absolutePath: moduleRoot, relativePrefix: "" }];
-    }
-    return (0, node_fs_1.readdirSync)(layersRoot).map((name) => ({
-        absolutePath: (0, node_path_1.join)(layersRoot, name),
-        relativePrefix: `layers/${name}/`,
-    }));
+    const wroteServer = writeServerModuleLoader(workspaceDir, registry);
+    return wroteRegistry || wroteModules || wroteBuilds || wroteServer;
 }
 const PUBLIC_DIRECTORY = "public";
 function writePublicAssets(workspaceDir, registry) {
     const files = new Map();
     for (const module of [...registry.modules].reverse()) {
-        for (const root of moduleAssetRoots(module.root)) {
+        for (const root of (0, asset_roots_1.moduleAssetRoots)(module.root)) {
             const source = (0, node_path_1.join)(root.absolutePath, PUBLIC_DIRECTORY);
             for (const file of (0, fs_sync_1.collectFiles)(source)) {
                 files.set(file, (0, node_path_1.join)(source, file));
@@ -112,7 +121,7 @@ function writePublicAssets(workspaceDir, registry) {
 }
 function discoverAssets(registry, directory, extensions) {
     return registry.modules.flatMap((module) => {
-        return moduleAssetRoots(module.root).flatMap((assetRoot) => {
+        return (0, asset_roots_1.moduleAssetRoots)(module.root).flatMap((assetRoot) => {
             const root = (0, node_path_1.join)(assetRoot.absolutePath, directory);
             return (0, fs_sync_1.collectFiles)(root)
                 .filter((file) => extensions.some((extension) => file.endsWith(extension)))
@@ -170,21 +179,8 @@ function readLocaleMessages(assets, registry) {
     }
     return messages;
 }
-function isLayerDirectory(relativePath) {
-    const segments = (0, fs_sync_1.toPosixPath)(relativePath).split("/");
-    return segments[0] === layer_aliases_1.MODULE_LAYERS_DIRNAME && segments.length <= 2;
-}
-function affectsAssetDirectory(directory, relativePath) {
-    if (isLayerDirectory(relativePath))
-        return true;
-    const segments = (0, fs_sync_1.toPosixPath)(relativePath).split("/");
-    const withinRoot = segments[0] === layer_aliases_1.MODULE_LAYERS_DIRNAME ? segments.slice(2) : segments;
-    return directory
-        .split("/")
-        .every((segment, index) => index >= withinRoot.length || withinRoot[index] === segment);
-}
 function affectsLocaleMessages(relativePath) {
-    return affectsAssetDirectory(LOCALE_DIRECTORY, relativePath);
+    return (0, asset_roots_1.affectsAssetDirectory)(LOCALE_DIRECTORY, relativePath);
 }
 function localeModuleSource(supportedLocales) {
     const loaders = supportedLocales
@@ -297,12 +293,16 @@ function writeShortcutExports(workspaceDir, registry) {
 exports.DERIVED_OUTPUTS = [
     {
         name: "module registry",
-        affects: (path) => [config_1.FRONTEND_MODULE_ENTRY, config_1.FRONTEND_BUILD_ENTRY].includes((0, fs_sync_1.toPosixPath)(path)),
+        affects: (path) => [
+            config_1.FRONTEND_MODULE_ENTRY,
+            config_1.FRONTEND_BUILD_ENTRY,
+            config_1.SERVER_MODULE_ENTRY,
+        ].includes((0, fs_sync_1.toPosixPath)(path)),
         write: writeModuleRegistry,
     },
     {
         name: "type paths",
-        affects: isLayerDirectory,
+        affects: asset_roots_1.isLayerDirectory,
         write: writeFrontendTypePaths,
         restartHint: "Restart ajs dms dev to apply it (Vite reads the '#<layer>' aliases and the auto-imported directories at startup)",
     },
@@ -310,15 +310,22 @@ exports.DERIVED_OUTPUTS = [
         name: "locale catalogs",
         affects: affectsLocaleMessages,
         write: writeLocaleMessages,
+        readsSourcesAsData: true,
     },
     {
         name: "aggregated shortcuts",
-        affects: (path) => affectsAssetDirectory(SHORTCUTS_DIRECTORY, path),
+        affects: (path) => (0, asset_roots_1.affectsAssetDirectory)(SHORTCUTS_DIRECTORY, path),
         write: writeShortcutExports,
     },
     {
         name: "public assets",
-        affects: (path) => affectsAssetDirectory(PUBLIC_DIRECTORY, path),
+        affects: (path) => (0, asset_roots_1.affectsAssetDirectory)(PUBLIC_DIRECTORY, path),
         write: writePublicAssets,
+        readsSourcesAsData: true,
+    },
+    {
+        name: "app configs",
+        affects: app_configs_1.affectsAppConfigs,
+        write: app_configs_1.writeAppConfigs,
     },
 ];

package/dist/help.js

@@ -16,7 +16,10 @@ exports.ENVIRONMENT_VARIABLES = [
     ["DMS_OFFLINE", "Same as --offline, unless 0, false, no or off"],
     ["DMS_PREPARE_STRICT", "Same as prepare --strict, read like DMS_OFFLINE"],
     ["PORT", "Same as -p"],
-    ["HOST", "Address the server binds to (default: 0.0.0.0)"],
+    [
+        "HOST",
+        "Address the server binds to (default: 127.0.0.1 for dev, 0.0.0.0 for start)",
+    ],
     [
         "DMS_COOKIE_SECURE",
         "Secure cookies unless false (default: false in dev, true in start)",
@@ -31,11 +34,11 @@ exports.ENVIRONMENT_VARIABLES = [
     ],
     [
         "DMS_HTML_RENDER_SECRET",
-        "Overrides the e-mail render secret the backend publishes",
+        "E-mail render secret, used when the backend publishes none in the manifest",
     ],
     [
         "DMS_OAUTH_RELAY_SECRET",
-        "Overrides the OAuth relay secret the backend publishes",
+        "OAuth relay secret, used when the backend publishes none in the manifest",
     ],
     [
         "DMS_AUTH_ESTABLISH_ENDPOINTS",
@@ -45,6 +48,10 @@ exports.ENVIRONMENT_VARIABLES = [
         "DMS_PUBLIC_ENDPOINTS",
         "More backend routes the proxy serves to anyone, as a JSON array",
     ],
+    [
+        "DMS_BACKEND_PROXIES",
+        "More backend prefixes the server proxies, as a JSON array of { path, auth? }",
+    ],
     ["DMS_CLIENT_BASE_URL", "Public frontend URL used in links and e-mails"],
     ["NO_COLOR", "Same as --no-color"],
     ["ANTELOPEJS_VERBOSE", "Same as --verbose"],